|
309961
|
- |
|
-
|
-
|
Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the …
|
-
|
CVE-2024-44678
|
2024-09-26 23:35 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309962
|
- |
|
-
|
-
|
An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module.
|
-
|
CVE-2024-41708
|
2024-09-26 23:35 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309963
|
- |
|
-
|
-
|
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timin…
|
-
|
CVE-2024-22893
|
2024-09-26 23:35 |
2024-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309964
|
8.8 |
HIGH
Network
|
themekraft
|
buddyforms
|
The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to privilege escalation in all versions up to…
|
NVD-CWE-noinfo
|
CVE-2024-8246
|
2024-09-26 23:00 |
2024-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309965
|
5.5 |
MEDIUM
Local
|
apple
|
macos
|
A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to modify protected parts of t…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2024-44168
|
2024-09-26 22:56 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309966
|
5.5 |
MEDIUM
Local
|
apple
|
macos
|
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. Processing a maliciously crafted texture may lead to…
|
CWE-125
Out-of-bounds Read
|
CVE-2024-44161
|
2024-09-26 22:56 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309967
|
5.5 |
MEDIUM
Local
|
apple
|
macos
|
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. A malicious application may be able to access private information.
|
NVD-CWE-noinfo
|
CVE-2024-44163
|
2024-09-26 22:55 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309968
|
7.1 |
HIGH
Local
|
apple
|
macos ipados iphone_os
|
This issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to bypass Privacy preferenc…
|
NVD-CWE-noinfo
|
CVE-2024-44164
|
2024-09-26 22:54 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309969
|
7.5 |
HIGH
Network
|
apple
|
macos iphone_os ipados visionos
|
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Network t…
|
NVD-CWE-noinfo
|
CVE-2024-44165
|
2024-09-26 22:53 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
309970
|
5.5 |
MEDIUM
Local
|
apple
|
macos
|
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-s…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2024-44166
|
2024-09-26 22:47 |
2024-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|